Add auto resolving fields

Extending Admin Interface
Adding cleanup procedure, that clears undeleted collection data

.drone.yml

@@ -0,0 +1,21 @@
+kind: pipeline
+type: docker
+name: default
+
+steps:
+  - name: Build with node
+    image: node:12
+    commands:
+      - npm install
+      - npm run build
+  - name: Publish to docker
+    image: plugins/docker
+    settings:
+      username:
+        from_secret: docker_username
+      password:
+        from_secret: docker_password
+      auto_tag: true
+      repo: hibas123.azurecr.io/realtimedb
+      registry: hibas123.azurecr.io
+      debug: true

.editorconfig

@@ -1,3 +1,5 @@
+[*]
 charset = utf-8
 indent_size = 3
 indent_style = space
+insert_final_newline = true

package.json

@@ -1,48 +1,47 @@
 {
-  "name": "@hibas123/realtimedb",
-  "version": "2.0.0-beta.1",
-  "description": "",
-  "main": "lib/index.js",
-  "private": true,
-  "scripts": {
-    "start": "node lib/index.js",
-    "build": "tsc",
-    "watch-ts": "tsc -w",
-    "watch-node": "nodemon --ignore *.ts lib/index.js",
-    "watch": "concurrently \"npm:watch-*\"",
-    "build-docker": "npm run build && docker build -t realtimedb .",
-    "prepublishOnly": "tsc"
-  },
-  "author": "Fabian Stamm <dev@fabianstamm.de>",
-  "license": "ISC",
-  "devDependencies": {
-    "@types/dotenv": "^8.2.0",
-    "@types/jsonwebtoken": "^8.3.5",
-    "@types/koa": "^2.0.51",
-    "@types/koa-router": "^7.0.42",
-    "@types/leveldown": "^4.0.1",
-    "@types/levelup": "^3.1.1",
-    "@types/nanoid": "^2.1.0",
-    "@types/node": "^12.12.5",
-    "@types/ws": "^6.0.3",
-    "concurrently": "^5.0.0",
-    "nodemon": "^1.19.4",
-    "typescript": "^3.6.4"
-  },
-  "dependencies": {
-    "@hibas123/logging": "^2.1.1",
-    "@hibas123/nodelogging": "^2.1.1",
-    "@hibas123/utils": "^2.1.1",
-    "dotenv": "^8.2.0",
-    "handlebars": "^4.5.1",
-    "jsonwebtoken": "^8.5.1",
-    "koa": "^2.11.0",
-    "koa-body": "^4.1.1",
-    "koa-router": "^7.4.0",
-    "leveldown": "^5.4.1",
-    "levelup": "^4.3.2",
-    "nanoid": "^2.1.6",
-    "what-the-pack": "^2.0.3",
-    "ws": "^7.2.0"
-  }
+   "name": "@hibas123/realtimedb",
+   "version": "2.0.0-beta.19",
+   "description": "",
+   "main": "lib/index.js",
+   "private": true,
+   "scripts": {
+      "start": "node lib/index.js",
+      "build": "tsc",
+      "watch-ts": "tsc -w",
+      "watch-node": "nodemon --ignore *.ts lib/index.js",
+      "watch": "concurrently \"npm:watch-*\"",
+      "build-docker": "npm run build && docker build -t realtimedb .",
+      "prepublishOnly": "tsc"
+   },
+   "author": "Fabian Stamm <dev@fabianstamm.de>",
+   "license": "ISC",
+   "devDependencies": {
+      "@types/dotenv": "^8.2.0",
+      "@types/jsonwebtoken": "^8.3.8",
+      "@types/koa": "^2.11.2",
+      "@types/koa-router": "^7.4.0",
+      "@types/leveldown": "^4.0.2",
+      "@types/levelup": "^4.3.0",
+      "@types/nanoid": "^2.1.0",
+      "@types/node": "^13.9.3",
+      "@types/ws": "^7.2.3",
+      "concurrently": "^5.1.0",
+      "nodemon": "^2.0.2",
+      "typescript": "^3.8.3"
+   },
+   "dependencies": {
+      "@hibas123/nodelogging": "^2.1.5",
+      "@hibas123/utils": "^2.2.3",
+      "dotenv": "^8.2.0",
+      "handlebars": "^4.7.3",
+      "jsonwebtoken": "^8.5.1",
+      "koa": "^2.11.0",
+      "koa-body": "^4.1.1",
+      "koa-router": "^8.0.8",
+      "leveldown": "^5.5.1",
+      "levelup": "^4.3.2",
+      "nanoid": "^2.1.11",
+      "what-the-pack": "^2.0.3",
+      "ws": "^7.2.3"
+   }
 }

src/config.ts

@@ -1,5 +1,6 @@
 import Logging from "@hibas123/nodelogging";
 import * as dotenv from "dotenv";
+import { LoggingTypes } from "@hibas123/logging";
 dotenv.config()
 
 
@@ -17,4 +18,8 @@ const config: IConfig = {
    dev: (process.env.DEV || "").toLowerCase() === "true"
 }
 
+if (config.dev) {
+   Logging.logLevel = LoggingTypes.Log;
+}
+
 export default config;

src/connection.ts

@@ -1,43 +1,12 @@
+import Logging from "@hibas123/nodelogging";
+import { IncomingMessage, Server } from "http";
 import * as WebSocket from "ws";
-import { Server, IncomingMessage } from "http";
 import { DatabaseManager } from "./database/database";
-import Logging from "@hibas123/logging";
-import Query from "./database/query";
+import { CollectionQuery, DocumentQuery, IQuery, ITypedQuery } from "./database/query";
 import Session from "./database/session";
+import { verifyJWT } from "./helper/jwt";
 import nanoid = require("nanoid");
 
-import * as JWT from "jsonwebtoken";
-
-async function verifyJWT(token: string, publicKey: string) {
-   return new Promise<any | undefined>((yes) => {
-      JWT.verify(token, publicKey, (err, decoded) => {
-         if (err)
-            yes(undefined);
-         else
-            yes(decoded);
-      })
-   })
-}
-
-const StoreSym = Symbol("store");
-function StoreQuery(result?: any) {
-   return {
-      [StoreSym]: true,
-      result
-   }
-}
-
-function DeleteQuery(result?: any) {
-   return {
-      [StoreSym]: false,
-      result
-   }
-}
-
-import { URLSearchParams } from "url";
-
-type QueryTypes = "keys" | "get" | "set" | "update" | "delete" | "push" | "subscribe" | "unsubscribe";
-
 export class ConnectionManager {
    static server: WebSocket.Server;
 
@@ -50,10 +19,9 @@ export class ConnectionManager {
       Logging.log("New Connection:");
       const sendError = (error: string) => socket.send(JSON.stringify({ ns: "error_msg", data: error }));
 
-
       const session = new Session(nanoid());
 
-      let query = new URLSearchParams(req.url.split("?").pop());
+      const query = new URL(req.url, "http://localhost").searchParams;
 
       const database = query.get("database");
       const db = DatabaseManager.getDatabase(database);
@@ -92,113 +60,42 @@ export class ConnectionManager {
          }
       }
 
-      const stored = new Map<string, Query>();
       const answer = (id: string, data: any, error: boolean = false) => {
+         if (error)
+            Logging.error(error as any);
          socket.send(JSON.stringify({ ns: "message", data: { id, error, data } }));
       }
 
       const handler = new Map<string, ((data: any) => void)>();
-      type QueryData = { id: string, type: QueryTypes, path: string[], data: any, options: any };
 
-      const queryHandler = new Map<string, (query: Query, permissions: { read: boolean, write: boolean }, data?: any) => Promise<any>>();
+      handler.set("v2", async ({ id, query }) => db.run(Array.isArray(query) ? query : [query], session)
+         .then(res => answer(id, res))
+         .catch(err => answer(id, undefined, err))
+      );
 
-      const noperm = new Error("No permisison!");
+      // handler.set("bulk", async ({ id, query }) => db.run(query, session)
+      //    .then(res => answer(id, res))
+      //    .catch(err => answer(id, undefined, err))
+      // );
 
-      if (session.root) {
-         queryHandler.set("collections", (query, perm, data) => {
-            return query.getCollections();
-         })
 
-         queryHandler.set("delete-collection", (query, perm, data) => {
-            return query.deleteCollection();
-         })
-      }
-
-      queryHandler.set("keys", (query, perm, data) => {
-         if (!perm.read)
-            throw noperm;
-         return query.keys();
+      const SnapshotMap = new Map<string, string>();
+      handler.set("snapshot", async ({ id, query }: { id: string, query: ITypedQuery<"snapshot"> }) => {
+         db.snapshot(query, session, (data => {
+            socket.send(JSON.stringify({
+               ns: "snapshot", data: { id, data }
+            }));
+         })).then(s => {
+            answer(id, s.snaphot);
+            SnapshotMap.set(id, s.id);
+         }).catch(err => answer(id, undefined, err));
       })
 
-      queryHandler.set("get", (query, perm, data) => {
-         if (!perm.read)
-            throw noperm;
-         return query.get();
-      })
-
-      queryHandler.set("set", (query, perm, data) => {
-         if (!perm.write)
-            throw noperm;
-         return query.set(data, {});
-      })
-
-      queryHandler.set("update", (query, perm, data) => {
-         if (!perm.write)
-            throw noperm;
-         return query.update(data);
-      })
-
-      queryHandler.set("push", (query, perm, data) => {
-         if (!perm.write)
-            throw noperm;
-         return query.push(data);
-      })
-
-      queryHandler.set("delete", (query, perm, data) => {
-         if (!perm.write)
-            throw noperm;
-         return query.delete();
-      })
-
-      queryHandler.set("subscribe", async (query, perm, data) => {
-         if (!perm.read)
-            throw noperm;
-
-         let subscriptionID = nanoid();
-
-         query.subscribe((data) => {
-            socket.send(JSON.stringify({ ns: "event", data: { id: subscriptionID, data } }));
-         }, data.types, data.options);
-
-         return StoreQuery(subscriptionID);
-      })
-
-      queryHandler.set("unsubscribe", async (query, perm, data) => {
-         query.unsubscribe();
-         return DeleteQuery(true);
-      })
-
-      handler.set("query", async ({ id, type, path, data }: QueryData) => {
-         //TODO: Handle case with no id, type, path
-         Logging.debug(`Request with id '${id}' from type '${type}' and path '${path}' with data`, data)
-
-         try {
-            if (!db)
-               throw new Error("Database not found!");
-            else {
-               let handler = queryHandler.get(type);
-               if (!handler) {
-                  throw new Error("Invalid Request!");
-               } else {
-                  const query = stored.get(id) || db.getQuery(path || [], session.sessionid);
-                  const perms = db.rules.hasPermission(path, session);
-
-                  let res = await handler(query, perms, data);
-                  if (res && typeof res === "object" && res[StoreSym] !== undefined) {
-                     if (res[StoreSym])
-                        stored.set(id, query);
-                     else
-                        stored.delete(id);
-
-                     res = res.result;
-                  }
-                  answer(id, res);
-               }
-            }
-         } catch (err) {
-            // Logging.error(err);
-            Logging.debug("Sending error:", err);
-            answer(id, err.message, true);
+      handler.set("unsubscribe", async ({ id }) => {
+         let i = SnapshotMap.get(id);
+         if (i) {
+            db.unsubscribe(i, session);
+            SnapshotMap.delete(i);
          }
       })
 
@@ -215,9 +112,10 @@ export class ConnectionManager {
          }
       })
 
-      socket.on("disconnect", () => {
-         stored.forEach(query => query.unsubscribe());
-         stored.clear();
+      socket.on("close", () => {
+         Logging.log(`${session.id} has disconnected!`);
+         session.subscriptions.forEach(unsubscribe => unsubscribe());
+         session.subscriptions.clear();
          socket.removeAllListeners();
       })
    }

src/database/database.ts

@@ -1,8 +1,18 @@
 import { Rules } from "./rules";
 import Settings from "../settings";
-import getLevelDB, { LevelDB, deleteLevelDB } from "../storage";
+import getLevelDB, { LevelDB, deleteLevelDB, resNull } from "../storage";
 import DocumentLock from "./lock";
-import Query from "./query";
+import { DocumentQuery, CollectionQuery, Query, QueryError, ITypedQuery, IQuery } from "./query";
+import Logging from "@hibas123/nodelogging";
+import Session from "./session";
+import nanoid = require("nanoid/generate");
+import { Observable } from "@hibas123/utils";
+
+const ALPHABET = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
+
+// interface ITransaction {
+//    queries: ITypedQuery<IWriteQueries>[];
+// }
 
 export class DatabaseManager {
    static databases = new Map<string, Database>();
@@ -45,12 +55,17 @@ export type ChangeTypes = "added" | "modified" | "deleted";
 export type Change = {
    data: any;
    document: string;
+   collection: string;
    type: ChangeTypes;
    sender: string;
 }
 
 
 export class Database {
+   public static getKey(collectionid: string, documentid?: string) {
+      return `${collectionid || ""}/${documentid || ""}`;
+   }
+
    private level = getLevelDB(this.name);
 
    get data() {
@@ -63,10 +78,15 @@ export class Database {
 
 
    public rules: Rules;
-   public locks = new DocumentLock()
+   private locks = new DocumentLock()
    public collectionLocks = new DocumentLock()
 
-   public changes = new Map<string, Set<(change: Change) => void>>();
+   public changeListener = new Map<string, Set<(change: Change[]) => void>>();
+   public collectionChangeListener = new Observable<{
+      key: string;
+      id: string;
+      type: "create" | "delete"
+   }>();
 
    toJSON() {
       return {
@@ -103,12 +123,305 @@ export class Database {
       this.publickey = key;
    }
 
+   public async resolve(path: string[], create = false): Promise<{ collection: string, document: string, collectionKey: string }> {
+      path = [...path]; // Create modifiable copy
+      let collectionID: string = undefined;
+      let documentKey = path.length % 2 === 0 ? path.pop() : undefined;
+      let key = path.join("/");
 
-   getQuery(path: string[], sender: string) {
-      return new Query(this, path, sender);
+      const lock = await this.collectionLocks.lock(key);
+
+      try {
+         collectionID = await this.collections.get(key).then(r => r.toString()).catch(resNull);
+         if (!collectionID && create) {
+            collectionID = nanoid(ALPHABET, 32);
+            await this.collections.put(key, collectionID);
+            setImmediate(() => {
+               this.collectionChangeListener.send({
+                  id: collectionID,
+                  key,
+                  type: "create"
+               })
+            })
+         }
+      } finally {
+         lock();
+      }
+
+      return {
+         collection: collectionID,
+         document: documentKey,
+         collectionKey: key
+      };
+   }
+
+   private sendChanges(changes: Change[]) {
+      let col = new Map<string, Map<string, Change[]>>();
+      changes.forEach(change => {
+         let e = col.get(change.collection);
+         if (!e) {
+            e = new Map()
+            col.set(change.collection, e);
+         }
+
+         let d = e.get(change.document);
+         if (!d) {
+            d = [];
+            e.set(change.document, d);
+         }
+
+         d.push(change);
+      })
+
+      setImmediate(() => {
+         for (let [collection, documents] of col.entries()) {
+            let collectionChanges = [];
+            for (let [document, documentChanges] of documents.entries()) {
+               let s = this.changeListener.get(Database.getKey(collection, document));
+               if (s)
+                  s.forEach(e => setImmediate(() => e(documentChanges)));
+
+               collectionChanges.push(...documentChanges);
+            }
+            let s = this.changeListener.get(Database.getKey(collection))
+            if (s)
+               s.forEach(e => setImmediate(() => e(collectionChanges)))
+         }
+      })
+   }
+
+   private validate(query: ITypedQuery<any>) {
+      const inv = new QueryError("Malformed query!");
+      if (!query || typeof query !== "object")
+         throw inv;
+
+      if (!query.type)
+         throw inv;
+
+      if (!query.path)
+         throw inv;
+   }
+
+   async run(queries: IQuery[], session: Session) {
+      let resolve: { path: string[], create: boolean, resolved?: [string, string, string] }[] = [];
+
+      const addToResolve = (path: string[], create?: boolean) => {
+         let entry = resolve.find(e => { //TODO: Find may be slow...
+            if (e.path.length !== path.length)
+               return false;
+            for (let i = 0; i < e.path.length; i++) {
+               if (e.path[i] !== path[i])
+                  return false;
+            }
+            return true;
+         })
+
+         if (!entry) {
+            entry = {
+               path,
+               create
+            }
+            resolve.push(entry);
+         }
+
+         entry.create = entry.create || create;
+
+         return entry;
+      }
+
+      const isBatch = queries.length > 1;
+      let parsed = queries.map(rawQuery => {
+         this.validate(rawQuery);
+         const isCollection = rawQuery.path.length % 2 === 1;
+
+         let query = isCollection
+            ? new CollectionQuery(this, session, rawQuery)
+            : new DocumentQuery(this, session, rawQuery);
+
+         if (isBatch && !query.batchCompatible)
+            throw new Error("There are queries that are not batch compatible!");
+
+         let path = addToResolve(rawQuery.path, query.createCollection);
+         if (query.additionalLock)
+            addToResolve(query.additionalLock);
+
+         return {
+            path,
+            query
+         };
+      });
+
+      resolve = resolve.sort((a, b) => a.path.length - b.path.length);
+
+      let locks: (() => void)[] = [];
+      for (let e of resolve) {
+         let { collection, document, collectionKey } = await this.resolve(e.path, e.create);
+         e.resolved = [collection, document, collectionKey];
+
+         locks.push(
+            await this.locks.lock(collection, document)
+         );
+      }
+
+      let result = [];
+      try {
+         let batch = this.data.batch();
+         let changes: Change[] = [];
+         for (let e of parsed) {
+            result.push(
+               await e.query.run(e.path.resolved[0], e.path.resolved[1], batch, e.path.resolved[2])
+            );
+            changes.push(...e.query.changes);
+         }
+         if (batch.length > 0)
+            await batch.write();
+
+         this.sendChanges(changes);
+      } finally {
+         locks.forEach(lock => lock());
+      }
+
+      if (isBatch)
+         return result;
+      else
+         return result[0]
+   }
+
+   async snapshot(rawQuery: ITypedQuery<"snapshot">, session: Session, onchange: (change: any) => void) {
+      Logging.debug("Snaphot request:", rawQuery.path);
+      this.validate(rawQuery);
+
+      if (rawQuery.type !== "snapshot")
+         throw new Error("Invalid query type!");
+
+      const isCollection = rawQuery.path.length % 2 === 1;
+      let query = isCollection
+         ? new CollectionQuery(this, session, rawQuery, true)
+         : new DocumentQuery(this, session, rawQuery, true);
+
+      const {
+         unsubscribe,
+         value
+      } = await query.snapshot(onchange);
+
+      const id = nanoid(ALPHABET, 16);
+      session.subscriptions.set(id, unsubscribe);
+      return {
+         id,
+         snaphot: value
+      };
+   }
+
+   async unsubscribe(id: string, session: Session) {
+      let query = session.subscriptions.get(id);
+      if (query) {
+         query();
+         session.subscriptions.delete(id);
+      }
    }
 
    async stop() {
       await this.data.close();
    }
+
+   public async runCleanup() {
+      const should = await new Promise<Set<string>>((yes, no) => {
+         const stream = this.collections.iterator({
+            keyAsBuffer: false,
+            valueAsBuffer: false
+         })
+
+         const collections = new Set<string>();
+         const onValue = (err: Error, key: string, value: string) => {
+            if (err) {
+               Logging.error(err);
+               stream.end((err) => Logging.error(err))
+               no(err);
+            }
+
+            if (!key && !value) {
+               yes(collections);
+            } else {
+               collections.add(value)
+               stream.next(onValue);
+            }
+         }
+
+         stream.next(onValue);
+      })
+
+      const existing = await new Promise<Set<string>>((yes, no) => {
+         const stream = this.data.iterator({
+            keyAsBuffer: false,
+            values: false
+         })
+
+         const collections = new Set<string>();
+         const onValue = (err: Error, key: string, value: Buffer) => {
+            if (err) {
+               Logging.error(err);
+               stream.end((err) => Logging.error(err))
+               no(err);
+            }
+
+            if (!key && !value) {
+               yes(collections);
+            } else {
+               let coll = key.split("/")[0];
+               collections.add(coll)
+               stream.next(onValue);
+            }
+         }
+
+         stream.next(onValue);
+      })
+
+      const toDelete = new Set<string>();
+      existing.forEach(collection => {
+         if (!should.has(collection))
+            toDelete.add(collection);
+      })
+
+      for (let collection of toDelete) {
+         const batch = this.data.batch();
+
+         let gt = Buffer.from(collection + "/ ");
+         gt[gt.length - 1] = 0;
+
+         let lt = Buffer.alloc(gt.length);
+         lt.set(gt);
+         lt[gt.length - 1] = 0xFF;
+
+         await new Promise<void>((yes, no) => {
+            const stream = this.data.iterator({
+               keyAsBuffer: false,
+               values: false,
+               gt,
+               lt
+            })
+
+            const onValue = (err: Error, key: string, value: Buffer) => {
+               if (err) {
+                  Logging.error(err);
+                  stream.end((err) => Logging.error(err))
+                  no(err);
+               }
+
+               if (!key && !value) {
+                  yes();
+               } else {
+                  batch.del(key);
+                  stream.next(onValue);
+               }
+            }
+
+            stream.next(onValue);
+         })
+
+         await batch.write();
+      }
+
+      return Array.from(toDelete.values());
+   }
+
 }

src/database/lock.ts

@@ -8,6 +8,7 @@ export default class DocumentLock {
    }
 
    async lock(collection: string = "", document: string = "") {
+      //TODO: Check collection locks
       let key = collection + "/" + document;
       let l = this.locks.get(key);
       if (l)
@@ -19,7 +20,7 @@ export default class DocumentLock {
 
       return () => {
          if (l.length > 0)
-            setImmediate(() => l.shift());
+            setImmediate(() => l.shift()());
          else
             this.locks.delete(key)
       }

src/database/query.ts

@@ -3,291 +3,719 @@ import { resNull } from "../storage";
 import nanoid = require("nanoid/generate");
 import Logging from "@hibas123/nodelogging";
 import * as MSGPack from "what-the-pack";
+import Session from "./session";
+import { LevelUpChain } from "levelup";
+
+export type IWriteQueries = "set" | "update" | "delete" | "add";
+export type ICollectionQueries =
+   | "get"
+   | "add"
+   | "keys"
+   | "delete-collection"
+   | "list";
+export type IDocumentQueries = "get" | "set" | "update" | "delete";
+
+export interface ITypedQuery<T> {
+   path: string[];
+   type: T;
+   data?: any;
+   options?: any;
+}
+
+export type IQuery = ITypedQuery<
+   ICollectionQueries | IDocumentQueries | "snapshot"
+>;
 
 export const MP = MSGPack.initialize(2 ** 20);
 
-const ALPHABET = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
+const ALPHABET =
+   "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
 
 const { encode, decode } = MP;
 
-interface ISubscribeOptions {
-   existing: boolean;
+type Runner = (
+   collection: string,
+   document: string,
+   batch: LevelUpChain,
+   collectionKey: string
+) => any;
+
+interface IPreparedQuery {
+   createCollection: boolean;
+   needDocument: boolean;
+   batchCompatible: boolean;
+   runner: Runner;
+   permission: "write" | "read";
+   additionalLock?: string[];
 }
 
-export default class Query {
+interface DocRes {
+   id: string;
+   data: any;
+}
+
+export abstract class Query {
    /**
     * Returns true if the path only contains valid characters and false if it doesn't
     * @param path Path to be checked
     */
    private validatePath(path: string[]) {
-      return path.every(e => (e.match(/[^a-zA-Z0-9_\-\<\>]/g) || []).length === 0);
+      return path.every(
+         e => (e.match(/[^a-zA-Z0-9_\-\<\>]/g) || []).length === 0
+      );
    }
 
-   constructor(private database: Database, private path: string[], private sender: string) {
-      if (path.length > 10) {
-         throw new Error("Path is to long. Path is only allowed to be 10 Layers deep!");
+   public changes: Change[] = [];
+
+   public readonly createCollection: boolean;
+   public readonly needDocument: boolean;
+   public readonly batchCompatible: boolean;
+   public readonly additionalLock?: string[];
+   public readonly permission: string;
+   private readonly _runner: Runner;
+
+   constructor(
+      protected database: Database,
+      protected session: Session,
+      protected query: IQuery,
+      snapshot = false
+   ) {
+      if (query.path.length > 10) {
+         throw new QueryError(
+            "Path is to long. Path is only allowed to be 10 Layers deep!"
+         );
       }
-      if (!this.validatePath(path)) {
-         throw new Error("Path can only contain a-z A-Z 0-9  '-' '-' '<' and '>' ");
+      if (!this.validatePath(query.path)) {
+         throw new QueryError(
+            "Path can only contain a-z A-Z 0-9  '-' '-' '<' and '>' "
+         );
       }
 
-      this.onChange = this.onChange.bind(this);
-   }
-
-
-   private async resolve(path: string[], create = false): Promise<{ collection: string, document: string, collectionKey: string }> {
-      path = [...path]; // Create modifiable copy
-      let collectionID: string = undefined;
-      let documentKey = path.length % 2 === 0 ? path.pop() : undefined;
-      let key = path.join("/");
-
-      const lock = await this.database.collectionLocks.lock(key);
-
-      try {
-         collectionID = await this.database.collections.get(key).then(r => r.toString()).catch(resNull);
-         if (!collectionID && create) {
-            collectionID = nanoid(ALPHABET, 32);
-            await this.database.collections.put(key, collectionID);
-         }
-      } finally {
-         lock();
+      if (!snapshot) {
+         let data = this.prepare(query);
+         this.createCollection = data.createCollection;
+         this.needDocument = data.needDocument;
+         this.batchCompatible = data.batchCompatible;
+         this.additionalLock = data.additionalLock;
+         this._runner = data.runner;
       }
-
-      return {
-         collection: collectionID,
-         document: documentKey,
-         collectionKey: key
-      };
    }
 
-   private getKey(collection: string, document?: string) {
-      return `${collection || ""}/${document || ""}`;
+   protected abstract prepare(query: IQuery): IPreparedQuery;
+
+   protected getDoc(collection: string, document: string) {
+      return this.database.data
+         .get(Database.getKey(collection, document), { asBuffer: true })
+         .then(res => decode<any>(res as Buffer))
+         .catch(resNull);
    }
 
-   private getDoc(collection: string, document: string) {
-      return this.database.data.get(this.getKey(collection, document), { asBuffer: true }).then(res => decode(res as Buffer)).catch(resNull);
-   }
-
-   private sendChange(collection: string, document: string, type: ChangeTypes, data: any) {
+   protected sendChange(
+      collection: string,
+      document: string,
+      type: ChangeTypes,
+      data: any
+   ) {
       let change: Change = {
          type,
          document,
+         collection,
          data,
-         sender: this.sender
-      }
-
-      let s = this.database.changes.get(this.getKey(collection, document))
-      if (s)
-         s.forEach(e => setImmediate(() => e(change)))
-      s = this.database.changes.get(this.getKey(collection))
-      if (s)
-         s.forEach(e => setImmediate(() => e(change)))
+         sender: this.session.id
+      };
 
+      this.changes.push(change);
    }
 
-   public async get() {
-      let { collection, document } = await this.resolve(this.path);
+   protected static getConstructorParams(
+      query: Query
+   ): [Database, Session, IQuery] {
+      return [query.database, query.session, query.query];
+   }
 
+   protected abstract checkChange(change: Change): boolean;
+   protected abstract firstSend(
+      collection: string,
+      document: string
+   ): Promise<any>;
+
+   public run(
+      collection: string,
+      document: string,
+      batch: LevelUpChain,
+      collectionKey: string
+   ) {
+      let perm = this.database.rules.hasPermission(
+         this.query.path,
+         this.session
+      );
+      if (this.permission === "read" && !perm.read) {
+         throw new QueryError("No permission!");
+      } else if (this.permission === "write" && !perm.write) {
+         throw new QueryError("No permission!");
+      }
+      this.query.path = perm.path;
+      return this._runner.call(
+         this,
+         collection,
+         document,
+         batch,
+         collectionKey
+      );
+   }
+
+   public async snapshot(
+      onChange: (change: (DocRes & { type: ChangeTypes })[]) => void
+   ) {
+      let perm = this.database.rules.hasPermission(
+         this.query.path,
+         this.session
+      );
+      if (!perm.read) {
+         throw new QueryError("No permission!");
+      }
+
+      this.query.path = perm.path;
+
+      const receivedChanges = (changes: Change[]) => {
+         let res = changes
+            .filter(change => this.checkChange(change))
+            .map(change => {
+               return {
+                  id: change.document,
+                  data: change.data,
+                  type: change.type
+               };
+            });
+         if (res.length > 0) onChange(res);
+      };
+
+      const unsub = this.database.collectionChangeListener.subscribe(change => {
+         if (change.key === collectionKey) {
+            if (change.type === "create") addSubscriber(change.id);
+            else removeSubscriber(); // Send delete for all elements (Don't know how to do this...)
+         }
+      });
+
+      let { collection, document, collectionKey } = await this.database.resolve(
+         this.query.path
+      );
+      let oldKey: string = undefined;
+
+      const removeSubscriber = () => {
+         if (!oldKey) return;
+         let s = this.database.changeListener.get(oldKey);
+         if (s) {
+            s.delete(receivedChanges);
+            if (s.size <= 0) this.database.changeListener.delete(oldKey);
+         }
+         oldKey = undefined;
+      };
+
+      const addSubscriber = (collection: string) => {
+         let key = Database.getKey(collection, document);
+         if (oldKey !== key) {
+            if (oldKey !== undefined) removeSubscriber();
+
+            let s = this.database.changeListener.get(key);
+            if (!s) {
+               s = new Set();
+               this.database.changeListener.set(key, s);
+            }
+
+            s.add(receivedChanges);
+         }
+      };
+
+      if (collection) {
+         addSubscriber(collection);
+      }
+
+      return {
+         unsubscribe: () => {
+            unsub();
+            removeSubscriber();
+         },
+         value: await this.firstSend(collection, document)
+      };
+   }
+}
+
+interface UpdateData {
+   [path: string]: {
+      type: "value" | "timestamp" | "increment" | "push";
+      value: any;
+   };
+}
+export class DocumentQuery extends Query {
+   prepare(query: IQuery): IPreparedQuery {
+      let type = query.type as IDocumentQueries;
+      switch (type) {
+         case "get":
+            return {
+               batchCompatible: false,
+               createCollection: false,
+               needDocument: false,
+               permission: "read",
+               runner: this.get
+            };
+         case "set":
+            return {
+               batchCompatible: true,
+               createCollection: true,
+               needDocument: true,
+               permission: "write",
+               runner: this.set
+            };
+         case "update":
+            return {
+               batchCompatible: true,
+               createCollection: true,
+               needDocument: true,
+               permission: "write",
+               runner: this.update
+            };
+         case "delete":
+            return {
+               batchCompatible: true,
+               createCollection: false,
+               needDocument: true,
+               permission: "write",
+               runner: this.delete
+            };
+         default:
+            throw new Error("Invalid query type: " + type);
+      }
+   }
+
+   private async get(collection: string, document: string) {
       if (!collection || !document) {
          return null;
       }
-      const lock = await this.database.locks.lock(collection, document);
-      return this.getDoc(collection, document).finally(() => lock())
+
+      return this.getDoc(collection, document);
    }
 
-   public async keys() {
-      let { collection, document } = await this.resolve(this.path);
-      if (document)
-         throw new Error("Keys only works on collections!");
-      if (!collection)
-         throw new Error("There must be a collection");
+   private async set(
+      collection: string,
+      document: string,
+      batch?: LevelUpChain
+   ) {
+      const { data, options } = this.query;
+      if (data === null) return this.delete(collection, document, batch);
 
+      let isNew = !(await this.getDoc(collection, document));
+      batch.put(Database.getKey(collection, document), encode(data));
+      this.sendChange(collection, document, isNew ? "added" : "modified", data);
+   }
 
-      let gt = Buffer.from(this.getKey(collection) + " ");
+   private async update(
+      collection: string,
+      document: string,
+      batch?: LevelUpChain
+   ) {
+      const updateData: UpdateData = this.query.data;
+
+      let data = await this.getDoc(collection, document);
+      let isNew = false;
+      if (!data) {
+         isNew = true;
+         data = {};
+      }
+
+      for (let path in updateData) {
+         const toUpdate = updateData[path];
+         let d = data;
+         let parts = path.split(".");
+         while (parts.length > 1) {
+            let seg = parts.shift();
+            if (!data[seg]) data[seg] = {};
+            d = data[seg];
+         }
+
+         const last = parts[0];
+
+         switch (toUpdate.type) {
+            case "value":
+               d[last] = toUpdate.value;
+               break;
+            case "increment":
+               if (d[last] === undefined || d[last] === null)
+                  d[last] = toUpdate.value;
+               else if (typeof d[last] !== "number") {
+                  throw new QueryError("Field is no number!");
+               } else {
+                  d[last] += toUpdate.value;
+               }
+               break;
+            case "timestamp":
+               d[last] = new Date().valueOf();
+               break;
+            case "push":
+               if (d[last] === undefined || d[last] === null)
+                  d[last] = [toUpdate.value];
+               else if (Array.isArray(d[last])) {
+                  d[last].push(toUpdate.value);
+               } else {
+                  throw new QueryError("Field is not array!");
+               }
+               break;
+            default:
+               throw new QueryError("Invalid update type: " + toUpdate.type);
+         }
+      }
+
+      if (batch) {
+         batch.put(Database.getKey(collection, document), encode(data));
+      } else {
+         await this.database.data.put(
+            Database.getKey(collection, document),
+            encode(data)
+         );
+      }
+
+      this.sendChange(collection, document, isNew ? "added" : "modified", data);
+   }
+
+   private async delete(
+      collection: string,
+      document: string,
+      batch?: LevelUpChain
+   ) {
+      if (batch) {
+         batch.del(Database.getKey(collection, document));
+      } else {
+         await this.database.data.del(Database.getKey(collection, document));
+      }
+
+      this.sendChange(collection, document, "deleted", null);
+   }
+
+   checkChange(change: Change) {
+      return true;
+   }
+
+   firstSend(collection: string, document: string) {
+      return this.get(collection, document);
+   }
+
+   public static fromQuery(query: Query) {
+      return new DocumentQuery(...Query.getConstructorParams(query));
+   }
+}
+
+type FieldPath = string;
+type WhereFilterOp =
+   | "<"
+   | "<="
+   | "=="
+   | ">="
+   | ">"
+   | "array-contains"
+   | "in"
+   | "array-contains-any";
+
+interface IQueryWhereVerbose {
+   fieldPath: FieldPath;
+   opStr: WhereFilterOp;
+   value: any;
+}
+
+type IQueryWhereArray = [FieldPath, WhereFilterOp, any];
+
+type IQueryWhere = IQueryWhereArray | IQueryWhereVerbose;
+
+export class CollectionQuery extends Query {
+   private _addId: string;
+
+   prepare(query): IPreparedQuery {
+      switch (query.type as ICollectionQueries) {
+         case "add":
+            this._addId = nanoid(ALPHABET, 32);
+            return {
+               batchCompatible: true,
+               createCollection: true,
+               needDocument: false,
+               runner: this.add,
+               permission: "write",
+               additionalLock: [...query.path, this._addId]
+            };
+         case "get":
+            const limit = (query.options || {}).limit;
+            if (limit) this.limit = limit;
+            const where = (query.options || {}).where;
+            if (where) this.where = where;
+
+            return {
+               batchCompatible: false,
+               createCollection: false,
+               needDocument: false,
+               permission: "read",
+               runner: this.get
+            };
+         case "keys":
+            return {
+               batchCompatible: false,
+               createCollection: false,
+               needDocument: false,
+               permission: "read",
+               runner: this.keys
+            };
+         case "list":
+            return {
+               batchCompatible: false,
+               createCollection: false,
+               needDocument: false,
+               permission: "read",
+               runner: this.keys
+            };
+         case "delete-collection":
+            return {
+               batchCompatible: false,
+               createCollection: false,
+               needDocument: false,
+               permission: "write",
+               runner: this.deleteCollection
+            };
+         // run = () => q.deleteCollection();
+         // break;
+         default:
+            throw new Error("Invalid query!");
+      }
+   }
+
+   private _where: IQueryWhereArray[] = [];
+   public set where(value: IQueryWhere[]) {
+      const invalidWhere = new QueryError("Invalid Where");
+      if (!Array.isArray(value)) throw invalidWhere;
+      let c = [];
+      this._where = value.map(cond => {
+         Logging.debug("Query Condition", cond);
+         if (Array.isArray(cond)) {
+            if (cond.length !== 3) throw invalidWhere;
+            return cond;
+         } else {
+            if (
+               cond &&
+               typeof cond === "object" &&
+               "fieldPath" in cond &&
+               "opStr" in cond &&
+               "value" in cond
+            ) {
+               return [cond.fieldPath, cond.opStr, cond.value];
+            } else {
+               throw invalidWhere;
+            }
+         }
+      });
+   }
+
+   public limit: number = -1;
+
+   public async add(
+      collection: string,
+      document: string,
+      batch: LevelUpChain,
+      collectionKey: string
+   ) {
+      let q = new DocumentQuery(this.database, this.session, {
+         type: "set",
+         path: this.additionalLock,
+         data: this.query.data,
+         options: this.query.options
+      });
+      await q.run(collection, this._addId, batch, collectionKey);
+      return this._addId;
+   }
+
+   private getStreamOptions(collection: string) {
+      let gt = Buffer.from(Database.getKey(collection) + " ");
       gt[gt.length - 1] = 0;
 
       let lt = Buffer.alloc(gt.length);
       lt.set(gt);
-      lt[gt.length - 1] = 0xFF;
+      lt[gt.length - 1] = 0xff;
+
+      return {
+         gt,
+         lt
+      };
+   }
+
+   public async keys(collection: string) {
+      if (!collection) return [];
 
       return new Promise<string[]>((yes, no) => {
          let keys = [];
          const stream = this.database.data.createKeyStream({
-            gt,
-            lt,
+            ...this.getStreamOptions(collection),
             keyAsBuffer: false
-         })
+         });
          stream.on("data", (key: string) => {
             let s = key.split("/", 2);
-            if (s.length > 1)
-               keys.push(s[1]);
+            if (s.length > 1) keys.push(s[1]);
          });
          stream.on("end", () => yes(keys));
          stream.on("error", no);
       });
    }
 
-   public async set(data: any, { merge = false }) {
-      if (data === null)
-         return this.delete();
-      let { collection, document } = await this.resolve(this.path, true);
-      if (!collection) {
-         throw new Error("There must be a collection!")
+   private _getFieldValue(data: any, path: FieldPath) {
+      let parts = path.split(".");
+      let d = data;
+      while (parts.length > 0) {
+         let seg = parts.shift();
+
+         d = data[seg];
+         if (d === undefined || d === null) break; // Undefined/Null has no other fields!
       }
-
-      if (!document) {
-         throw new Error("There must be a document key!")
-      }
-
-      const lock = await this.database.locks.lock(collection, document);
-
-      let isNew = await this.database.data.get(this.getKey(collection, document)).catch(resNull).then(e => e !== null);
-
-      return this.database.data
-         .put(this.getKey(collection, document), encode(data))
-         .then(() => this.sendChange(collection, document, isNew ? "added" : "modified", data))
-         .finally(() => lock())
+      return d;
    }
 
-   public async push(value: any) {
-      let id = nanoid(ALPHABET, 32);
-      let q = new Query(this.database, [...this.path, id], this.sender);
-      await q.set(value, {});
-      return id;
-   }
+   private _fitsWhere(data: any): boolean {
+      if (this._where.length > 0) {
+         return this._where.every(([fieldPath, opStr, value]) => {
+            let val = this._getFieldValue(data, fieldPath);
+            switch (opStr) {
+               case "<":
+                  return val < value;
+               case "<=":
+                  return val <= value;
+               case "==":
+                  return val == value;
+               case ">=":
+                  return val >= value;
+               case ">":
+                  return val > value;
+               case "array-contains":
+                  if (Array.isArray(val)) {
+                     return val.some(e => e === value);
+                  }
 
-   public async delete() {
-      let { collection, document } = await this.resolve(this.path);
-
-      if (!collection) {
-         throw new Error("There must be a collection!")
+                  return false;
+               // case "array-contains-any":
+               case "in":
+                  if (typeof val === "object") {
+                     return value in val;
+                  }
+                  return false;
+               default:
+                  throw new QueryError("Invalid where operation " + opStr);
+            }
+         });
       }
-
-      if (!document) {
-         throw new Error("There must be a document key!")
-      }
-
-
-      const lock = await this.database.locks.lock(collection, document);
-
-      return await this.database.data
-         .del(`${collection}/${document}`)
-         .then(() => this.sendChange(collection, document, "deleted", null))
-         .finally(() => lock())
+      return true;
    }
 
-   public async update(data: any) {
-      //TODO: Implement
+   async get(collection: string) {
+      if (!collection) return [];
+
+      return new Promise<DocRes[]>((yes, no) => {
+         const stream = this.database.data.iterator({
+            ...this.getStreamOptions(collection),
+            keyAsBuffer: false,
+            valueAsBuffer: true
+         });
+
+         let values: DocRes[] = [];
+
+         const onValue = (err: Error, key: string, value: Buffer) => {
+            if (err) {
+               no(err);
+               stream.end(err => Logging.error(err));
+            } else {
+               if (!key && !value) {
+                  // END
+                  Logging.debug("Checked all!");
+                  yes(values);
+               } else {
+                  let s = key.split("/", 2);
+                  if (s.length <= 1) return;
+
+                  const id = s[1];
+
+                  let data = decode(value);
+                  if (this._fitsWhere(data)) {
+                     if (this.limit < 0 || values.length < this.limit) {
+                        values.push({
+                           id,
+                           data
+                        });
+                     } else {
+                        stream.end(err => (err ? no(err) : yes(values)));
+                        return;
+                     }
+                  }
+
+                  stream.next(onValue);
+               }
+            }
+         };
+
+         stream.next(onValue);
+      });
    }
 
-   public async getCollections() {
+   checkChange(change: Change) {
+      return this._fitsWhere(change.data);
+   }
+
+   firstSend(collection: string) {
+      return this.get(collection);
+   }
+
+   public async collections() {
+      if (!this.session.root) throw new QueryError("No Permission!");
+
       return new Promise<string[]>((yes, no) => {
          let keys = [];
-         const stream = this.database.data.createKeyStream({ keyAsBuffer: false })
+         const stream = this.database.data.createKeyStream({
+            keyAsBuffer: false
+         });
          stream.on("data", (key: string) => keys.push(key.split("/")));
          stream.on("end", () => yes(keys));
          stream.on("error", no);
       });
    }
 
-   public async deleteCollection() {
-      const { collection, document, collectionKey } = await this.resolve(this.path);
-
-      if (document) {
-         throw new Error("There can be no document defined on this operation");
-      }
+   public async deleteCollection(
+      collection: string,
+      document: string,
+      _b: LevelUpChain,
+      collectionKey: string
+   ) {
+      if (!this.session.root) throw new QueryError("No Permission!");
 
+      //TODO: Lock whole collection!
       let batch = this.database.data.batch();
       try {
          if (collection) {
-            let keys = await this.keys();
-            for (let key in keys) {
-               batch.del(key);
+            let documents = await this.keys(collection);
+            // Logging.debug("To delete:", documents)
+            for (let document of documents) {
+               batch.del(Database.getKey(collection, document));
             }
             await batch.write();
             batch = undefined;
             await this.database.collections.del(collectionKey);
+            this.database.collectionChangeListener.send({
+               id: collection,
+               key: collectionKey,
+               type: "delete"
+            });
          }
       } finally {
-         if (batch)
-            batch.clear();
+         if (batch) batch.clear();
       }
    }
 
-
-
-   private subscription: {
-      key: string;
-      type: Set<ChangeTypes>;
-      send: (data: Omit<Change, "sender">) => void;
-   };
-   async subscribe(send: (data: Omit<Change, "sender">) => void, type: ChangeTypes[] | undefined, _options: Partial<ISubscribeOptions>) {
-      let options: ISubscribeOptions = {
-         existing: true,
-         ..._options
-      }
-
-      let { collection, document } = await this.resolve(this.path);
-
-      let key = this.getKey(collection, document);
-      let s = this.database.changes.get(key) || new Set();
-      s.add(this.onChange)
-      this.database.changes.set(key, s);
-
-      this.subscription = {
-         key,
-         send,
-         type: new Set(type || [])
-      };
-
-      Logging.debug("Existing?", options.existing)
-
-      if (options.existing) {
-         if (document) {
-            send({
-               document: document,
-               type: "added",
-               data: await this.get(),
-            })
-         } else {
-            await this.keys().then(async documents => {
-               for (let document of documents) {
-                  const data = await this.getDoc(collection, document);
-                  if (data)
-                     send({
-                        type: "added",
-                        document,
-                        data
-                     })
-               }
-            })
-         }
-      }
-
-      Logging.debug("Subscribed");
-   }
-
-   async onChange(change: Change) {
-      const { type, send } = this.subscription;
-
-      // Events from the sender are handled locally
-      if (change.sender !== this.sender && type.has(change.type)) {
-         let c = { ...change };
-         delete c.sender;
-         send(c)
-      }
-   }
-
-   unsubscribe() {
-      if (!this.subscription) {
-         const { key } = this.subscription;
-         let s = this.database.changes.get(key);
-         if (s) {
-            s.delete(this.onChange);
-            if (s.size <= 0)
-               this.database.changes.delete(key);
-         }
-         this.subscription = undefined;
-      }
+   public static fromQuery(query: Query) {
+      return new CollectionQuery(...Query.getConstructorParams(query));
+   }
+}
+
+export class QueryError extends Error {
+   constructor(message: string) {
+      super(message);
    }
 }

src/database/rules.ts

@@ -2,13 +2,15 @@ import Session from "./session";
 import Logging from "@hibas123/nodelogging";
 
 interface IRule<T> {
-   ".write"?: T
-   ".read"?: T
+   ".write"?: T;
+   ".read"?: T;
 }
 
-type IRuleConfig<T> = {
-   [segment: string]: IRuleConfig<T>;
-} | IRule<T>;
+type IRuleConfig<T> =
+   | IRule<T>
+   | {
+        [segment: string]: IRuleConfig<T>;
+     };
 
 type IRuleRaw = IRuleConfig<string>;
 type IRuleParsed = IRuleConfig<boolean>;
@@ -17,17 +19,16 @@ const resolve = (value: any) => {
    if (value === true) {
       return true;
    } else if (typeof value === "string") {
-
    }
    return undefined;
-}
+};
 
 export class Rules {
    rules: IRuleParsed;
    constructor(private config: string) {
       let parsed: IRuleRaw = JSON.parse(config);
 
-      const analyze = (raw: IRuleRaw) => {
+      const analyse = (raw: IRuleRaw) => {
          let r: IRuleParsed = {};
 
          if (raw[".read"]) {
@@ -47,25 +48,34 @@ export class Rules {
          }
 
          for (let segment in raw) {
-            if (segment.startsWith("."))
-               continue;
+            if (segment.startsWith(".")) continue;
 
-            r[segment] = analyze(raw[segment]);
+            r[segment] = analyse(raw[segment]);
          }
          return r;
-      }
+      };
 
-      this.rules = analyze(parsed);
+      this.rules = analyse(parsed);
    }
 
-   hasPermission(path: string[], session: Session): { read: boolean, write: boolean } {
+   hasPermission(
+      path: string[],
+      session: Session
+   ): { read: boolean; write: boolean; path: string[] } {
+      if (session.root)
+         return {
+            read: true,
+            write: true,
+            path: path
+         };
       let read = this.rules[".read"] || false;
       let write = this.rules[".write"] || false;
 
       let rules = this.rules;
 
-      for (let segment of path) {
-         if (segment.startsWith("$") || segment.startsWith(".")) {
+      for (let idx in path) {
+         let segment = path[idx];
+         if (segment.startsWith(".")) {
             read = false;
             write = false;
             Logging.log("Invalid query path (started with '$' or '.'):", path);
@@ -77,22 +87,25 @@ export class Rules {
             .find(e => {
                switch (e) {
                   case "$uid":
-                     if (segment === session.uid)
+                     if (segment === "$uid") {
+                        path[idx] = session.uid;
                         return true;
+                     }
+                     if (segment === session.uid) return true;
                      break;
                }
                return false;
-            })
+            });
 
          rules = (k ? rules[k] : undefined) || rules[segment] || rules["*"];
 
          if (rules) {
             if (rules[".read"]) {
-               read = rules[".read"]
+               read = rules[".read"];
             }
 
             if (rules[".write"]) {
-               read = rules[".write"]
+               read = rules[".write"];
             }
          } else {
             break;
@@ -101,8 +114,9 @@ export class Rules {
 
       return {
          read: read as boolean,
-         write: write as boolean
-      }
+         write: write as boolean,
+         path
+      };
    }
 
    toJSON() {

src/database/session.ts

@@ -1,8 +1,11 @@
+
 export default class Session {
    constructor(private _sessionid: string) { }
-   get sessionid() {
+   get id() {
       return this._sessionid;
    }
    root: boolean = false;
    uid: string = undefined;
+
+   subscriptions = new Map<string, (() => void)>();
 }

src/helper/jwt.ts

@@ -0,0 +1,12 @@
+import * as JWT from "jsonwebtoken";
+
+export async function verifyJWT(token: string, publicKey: string) {
+   return new Promise<any | undefined>((yes) => {
+      JWT.verify(token, publicKey, (err, decoded) => {
+         if (err)
+            yes(undefined);
+         else
+            yes(decoded);
+      })
+   })
+}

src/index.ts

@@ -5,9 +5,14 @@ import { DatabaseManager } from "./database/database";
 import { createServer } from "http";
 import { ConnectionManager } from "./connection";
 import { LoggingTypes } from "@hibas123/logging";
+import { readFileSync } from "fs";
 
 Logging.logLevel = config.dev ? LoggingTypes.Debug : LoggingTypes.Log;
 
+const version = JSON.parse(readFileSync("./package.json").toString()).version;
+
+Logging.log("Starting Database version:", version);
+
 DatabaseManager.init().then(() => {
    const http = createServer(Web.callback());
    ConnectionManager.bind(http);

src/web/helper/errors.ts

@@ -398,6 +398,12 @@ export class NoPermissionError extends HttpError {
    }
 }
 
+export class UnauthorizedError extends HttpError {
+   constructor(message: string) {
+      super(message, HttpStatusCode.UNAUTHORIZED)
+   }
+}
+
 export class BadRequestError extends HttpError {
    constructor(message: string) {
       super(message, HttpStatusCode.BAD_REQUEST)

src/web/helper/form.ts

@@ -1,20 +1,30 @@
-import getTemplate from "./hb";
+import { getTemplate } from "./hb";
 import { Context } from "vm";
 
 interface IFormConfigField {
    type: "text" | "number" | "boolean" | "textarea";
    label: string;
    value?: string;
+   disabled?: boolean;
 }
 
-type IFormConfig = { [name: string]: IFormConfigField }
+type IFormConfig = { [name: string]: IFormConfigField };
 
-export default function getForm(url: string, title: string, fieldConfig: IFormConfig): (ctx: Context) => void {
-   let fields = Object.keys(fieldConfig).map(name => ({ name, ...fieldConfig[name] }))
+export default function getForm(
+   url: string,
+   title: string,
+   fieldConfig: IFormConfig
+): (ctx: Context) => void {
+   let fields = Object.keys(fieldConfig).map(name => ({
+      name,
+      ...fieldConfig[name],
+      disabled: fieldConfig.disabled ? "disabled" : ""
+   }));
 
-   return ctx => ctx.body = getTemplate("forms")({
-      url,
-      title,
-      fields
-   });
+   return ctx =>
+      (ctx.body = getTemplate("forms")({
+         url,
+         title,
+         fields
+      }));
 }

src/web/helper/hb.ts

@@ -1,7 +1,7 @@
 import * as Handlebars from "handlebars";
 import { readFileSync } from "fs";
 import config from "../../config";
-import Logging from "@hibas123/logging";
+import Logging from "@hibas123/nodelogging";
 
 
 function checkCondition(v1, operator, v2) {
@@ -37,8 +37,22 @@ Handlebars.registerHelper('ifCond', function (v1, operator, v2, options) {
 
 
 const cache = new Map<string, Handlebars.TemplateDelegate>();
+const htmlCache = new Map<string, string>();
 
-export default function getTemplate(name: string) {
+export function getView(name: string) {
+   let tl: string;
+   if (!config.dev)
+      tl = htmlCache.get(name);
+
+   if (!tl) {
+      tl = readFileSync(`./views/${name}.html`).toString();
+      htmlCache.set(name, tl);
+   }
+
+   return tl;
+}
+
+export function getTemplate(name: string) {
    let tl: Handlebars.TemplateDelegate;
    if (!config.dev)
       tl = cache.get(name);

src/web/helper/table.ts

@@ -1,5 +1,5 @@
 import { Context } from "koa";
-import getTemplate from "./hb";
+import { getTemplate } from "./hb";
 
 export default function getTable(title: string, data: any[], ctx: Context) {
    let table: string[][] = [];

src/web/v1/admin.ts

@@ -2,20 +2,29 @@ import * as Router from "koa-router";
 import Settings from "../../settings";
 import getForm from "../helper/form";
 import getTable from "../helper/table";
-import { BadRequestError, NoPermissionError } from "../helper/errors";
+import {
+   BadRequestError,
+   NoPermissionError,
+   NotFoundError
+} from "../helper/errors";
 import { DatabaseManager } from "../../database/database";
 import { MP } from "../../database/query";
 import config from "../../config";
-import Logging from "@hibas123/logging";
+import Logging from "@hibas123/nodelogging";
+import { getView } from "../helper/hb";
 
 const AdminRoute = new Router();
 
 AdminRoute.use(async (ctx, next) => {
    const { key } = ctx.query;
-   if (key !== config.admin)
-      throw new NoPermissionError("No permission!");
+   if (key !== config.admin) throw new NoPermissionError("No permission!");
    return next();
-})
+});
+
+AdminRoute.get("/", async ctx => {
+   //TODO: Main Interface
+   ctx.body = getView("admin");
+});
 
 AdminRoute.get("/settings", async ctx => {
    let res = await new Promise<string[][]>((yes, no) => {
@@ -27,99 +36,177 @@ AdminRoute.get("/settings", async ctx => {
       let res = [["key", "value"]];
       stream.on("data", ({ key, value }) => {
          res.push([key, value]);
-      })
+      });
 
       stream.on("error", no);
-      stream.on("end", () => yes(res))
-   })
+      stream.on("end", () => yes(res));
+   });
 
    if (ctx.query.view) {
       return getTable("Settings", res, ctx);
    } else {
       ctx.body = res;
    }
-})
+});
 
 AdminRoute.get("/data", async ctx => {
    const { database } = ctx.query;
    let db = DatabaseManager.getDatabase(database);
-   if (!db)
-      throw new BadRequestError("Database not found");
+   if (!db) throw new BadRequestError("Database not found");
    let res = await new Promise<string[][]>((yes, no) => {
-
       const stream = db.data.createReadStream({
          keys: true,
          values: true,
          valueAsBuffer: true,
-         keyAsBuffer: false
+         keyAsBuffer: false,
+         limit: 1000
       });
       let res = [["key", "value"]];
-      stream.on("data", ({ key, value }: { key: string, value: Buffer }) => {
-         Logging.debug("Admin Key:", key);
-         res.push([key, key.split("/").length > 2 ? value.toString() : JSON.stringify(MP.decode(value))]);
-      })
+      stream.on("data", ({ key, value }: { key: string; value: Buffer }) => {
+         res.push([
+            key,
+            key.split("/").length > 2
+               ? value.toString()
+               : JSON.stringify(MP.decode(value))
+         ]);
+      });
 
       stream.on("error", no);
-      stream.on("end", () => yes(res))
-   })
+      stream.on("end", () => yes(res));
+   });
 
    if (ctx.query.view) {
       return getTable("Data from " + database, res, ctx);
    } else {
       ctx.body = res;
    }
-})
+});
 
-AdminRoute
-   .get("/database", ctx => {
-      const isFull = ctx.query.full === "true" || ctx.query.full === "1";
-      let res;
-      if (isFull) {
-         //TODO: Better than JSON.parse / JSON.stringify
-         res = Array.from(DatabaseManager.databases.entries()).map(([name, config]) => ({ name, ...(JSON.parse(JSON.stringify(config))) }));
-      } else {
-         res = Array.from(DatabaseManager.databases.keys());
-      }
+AdminRoute.get("/database", ctx => {
+   const isFull = ctx.query.full === "true" || ctx.query.full === "1";
+   let res;
+   if (isFull) {
+      //TODO: Better than JSON.parse / JSON.stringify
+      res = Array.from(DatabaseManager.databases.entries()).map(
+         ([name, config]) => ({
+            name,
+            ...JSON.parse(JSON.stringify(config))
+         })
+      );
+   } else {
+      res = Array.from(DatabaseManager.databases.keys());
+   }
 
-      if (ctx.query.view) {
-         return getTable("Databases" + (isFull ? "" : " small"), res, ctx);
-      } else {
-         ctx.body = res;
-      }
+   if (ctx.query.view) {
+      return getTable("Databases" + (isFull ? "" : " small"), res, ctx);
+   } else {
+      ctx.body = res;
+   }
+}).post("/database", async ctx => {
+   const { name, rules, publickey, accesskey, rootkey } = ctx.request.body;
+
+   if (!name) throw new BadRequestError("Name must be set!");
+
+   let db = DatabaseManager.getDatabase(name);
+   if (!db) db = await DatabaseManager.addDatabase(name);
+
+   if (publickey) await db.setPublicKey(publickey);
+
+   if (rules) await db.setRules(rules);
+
+   if (accesskey) await db.setAccessKey(accesskey);
+
+   if (rootkey) await db.setRootKey(rootkey);
+
+   ctx.body = "Success";
+});
+
+AdminRoute.get("/collections", async ctx => {
+   const { database } = ctx.query;
+   let db = DatabaseManager.getDatabase(database);
+   if (!db) throw new BadRequestError("Database not found");
+
+   let res = await new Promise<string[]>((yes, no) => {
+      const stream = db.collections.createKeyStream({
+         keyAsBuffer: false,
+         limit: 1000
+      });
+      let res = [];
+      stream.on("data", (key: string) => {
+         res.push(key);
+      });
+
+      stream.on("error", no);
+      stream.on("end", () => yes(res));
+   });
+
+   if (ctx.query.view) {
+      return getTable("Databases", res, ctx);
+   } else {
+      ctx.body = res;
+   }
+});
+
+AdminRoute.get("/collections/cleanup", async ctx => {
+   const { database } = ctx.query;
+   let db = DatabaseManager.getDatabase(database);
+   if (!db) throw new BadRequestError("Database not found");
+
+   let deleted = await db.runCleanup();
+   if (ctx.query.view) {
+      return getTable("Databases", deleted, ctx);
+   } else {
+      ctx.body = deleted;
+   }
+});
+
+AdminRoute.get(
+   "/database/new",
+   getForm("/v1/admin/database", "New Database", {
+      name: { label: "Name", type: "text" },
+      accesskey: { label: "Access Key", type: "text" },
+      rootkey: { label: "Root access key", type: "text" },
+      rules: {
+         label: "Rules",
+         type: "textarea",
+         value: `{\n   ".write": true, \n   ".read": true \n}`
+      },
+      publickey: { label: "Public Key", type: "textarea" }
    })
-   .post("/database", async ctx => {
-      const { name, rules, publickey, accesskey, rootkey } = ctx.request.body;
+);
 
-      if (!name)
-         throw new BadRequestError("Name must be set!");
-
-      let db = DatabaseManager.getDatabase(name);
-      if (!db)
-         db = await DatabaseManager.addDatabase(name);
-
-      if (publickey)
-         await db.setPublicKey(publickey);
-
-      if (rules)
-         await db.setRules(rules);
-
-      if (accesskey)
-         await db.setAccessKey(accesskey);
-
-
-      if (rootkey)
-         await db.setRootKey(rootkey);
-
-
-      ctx.body = "Success";
-   })
-
-AdminRoute.get("/database/new", getForm("/v1/admin/database", "New/Change Database", {
-   name: { label: "Name", type: "text", },
-   accesskey: { label: "Access Key", type: "text" },
-   rootkey: { label: "Root access key", type: "text" },
-   rules: { label: "Rules", type: "textarea", value: `{\n   ".write": true, \n   ".read": true \n}` },
-   publickey: { label: "Public Key", type: "textarea" }
-}))
+AdminRoute.get("/database/update", async ctx => {
+   const { database } = ctx.query;
+   let db = DatabaseManager.getDatabase(database);
+   if (!db) throw new NotFoundError("Database not found!");
+   getForm("/v1/admin/database", "Change Database", {
+      name: {
+         label: "Name",
+         type: "text",
+         value: db.name,
+         disabled: true
+      },
+      accesskey: {
+         label: "Access Key",
+         type: "text",
+         value: db.accesskey
+      },
+      rootkey: {
+         label: "Root access key",
+         type: "text",
+         value: db.rootkey
+      },
+      rules: {
+         label: "Rules",
+         type: "textarea",
+         value: db.rules.toJSON()
+      },
+      publickey: {
+         label: "Public Key",
+         type: "textarea",
+         value: db.publickey
+      }
+   })(ctx);
+});
 
 export default AdminRoute;

src/web/v1/index.ts

@@ -1,5 +1,62 @@
 import * as Router from "koa-router";
 import AdminRoute from "./admin";
+import { DatabaseManager } from "../../database/database";
+import {
+   NotFoundError,
+   NoPermissionError,
+   BadRequestError
+} from "../helper/errors";
+import Logging from "@hibas123/nodelogging";
+import Session from "../../database/session";
+import nanoid = require("nanoid");
+import { verifyJWT } from "../../helper/jwt";
+import { QueryError } from "../../database/query";
 const V1 = new Router({ prefix: "/v1" });
+
 V1.use("/admin", AdminRoute.routes(), AdminRoute.allowedMethods());
+
+V1.post("/db/:database/query", async ctx => {
+   const { database } = ctx.params;
+   const { accesskey, authkey, rootkey } = ctx.query;
+
+   const query = ctx.request.body;
+   if (!query) {
+      throw new BadRequestError("Query not defined!");
+   }
+
+   const session = new Session(nanoid());
+   const db = DatabaseManager.getDatabase(database);
+   if (!db) {
+      throw new NotFoundError("Database not found!");
+   }
+
+   if (db.accesskey) {
+      if (!accesskey || accesskey !== db.accesskey) {
+         throw new NoPermissionError("Invalid Access Key");
+      }
+   }
+
+   if (authkey && db.publickey) {
+      let res = await verifyJWT(authkey, db.publickey);
+      if (!res || !res.uid) {
+         throw new BadRequestError("Invalid JWT");
+      } else {
+         session.uid = res.uid;
+      }
+   }
+
+   if (rootkey && db.rootkey) {
+      if (rootkey === db.rootkey) {
+         session.root = true;
+         Logging.warning(`Somebody logged into ${database} via rootkey`);
+      }
+   }
+
+   ctx.body = await db.run([query], session).catch(err => {
+      if (err instanceof QueryError) {
+         throw new BadRequestError(err.message);
+      }
+      throw err;
+   });
+});
 export default V1;

views/admin.html

@@ -0,0 +1,118 @@
+<!DOCTYPE html>
+<html lang="en">
+   <head>
+      <meta charset="UTF-8" />
+      <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+      <meta http-equiv="X-UA-Compatible" content="ie=edge" />
+      <title>Admin Interface</title>
+      <link
+         rel="stylesheet"
+         href="https://unpkg.com/@hibas123/theme/out/base.css"
+      />
+      <link
+         rel="stylesheet"
+         href="https://unpkg.com/@hibas123/theme/out/light.css"
+      />
+
+      <script src="https://unpkg.com/handlebars/dist/handlebars.min.js"></script>
+
+      <style>
+         #message {
+            visibility: hidden;
+            background-color: lightgreen;
+            border: 1px solid lime;
+            border-radius: 0.5rem;
+            padding: 1rem;
+            font-size: 1.5rem;
+            margin-bottom: 1rem;
+         }
+
+         .grid {
+            display: grid;
+            height: 100vh;
+            grid-template-columns: 360px auto;
+         }
+
+         #content {
+            position: absolute;
+            top: 0;
+            left: 0;
+            width: 100%;
+            height: 100%;
+            border: 0;
+         }
+      </style>
+   </head>
+
+   <body>
+      <div class="grid">
+         <div style="border-right: 1px solid darkgrey; padding: 1rem;">
+            <h2>Navigation:</h2>
+            <ul class="list list-clickable">
+               <li onclick="loadView('settings');">Settings</li>
+               <li onclick="loadView('database', {full:true});">Databases</li>
+               <li onclick="loadView('database/new');">New Database</li>
+            </ul>
+            Databases:
+            <div
+               id="dbs"
+               class="list list-clickable"
+               style="margin: 1rem;"
+            ></div>
+         </div>
+         <div style="position:relative;">
+            <iframe id="content"></iframe>
+         </div>
+      </div>
+
+      <template> </template>
+
+      <script>
+         const key = new URL(window.location.href).searchParams.get("key");
+         const content = document.getElementById("content");
+         const base = new URL(window.location.href).host;
+
+         function getUrl(name, params, view = true) {
+            const url = new URL(window.location.href);
+            url.pathname = "/v1/admin/" + name;
+            for (let key in params || {})
+               url.searchParams.set(key, params[key]);
+
+            url.searchParams.set("key", key);
+            if (view) url.searchParams.set("view", "true");
+
+            return url.href;
+         }
+
+         function loadView(name, params) {
+            content.src = getUrl(name, params);
+         }
+
+         loadView("settings");
+
+         const dbsul = document.getElementById("dbs");
+         function reloadDBs() {
+            fetch(getUrl("database", {}, false))
+               .then(res => res.json())
+               .then(databases =>
+                  databases.map(
+                     database => `
+<div class="card margin elv-4">
+   <h3>${database}</h3>
+   <button class=btn onclick="loadView('data', {database:'${database}'})">Data</button>
+   <button class=btn onclick="loadView('collections', {database:'${database}'})">Collections</button>
+   <button class=btn onclick="loadView('collections/cleanup', {database:'${database}'})">Clean</button>
+   <button class=btn onclick="loadView('database/update', {database:'${database}'})">Change</button>
+</div>`
+                  )
+               )
+               .then(d => d.join("\n"))
+               .then(d => (dbsul.innerHTML = d))
+               .catch(console.error);
+         }
+
+         reloadDBs();
+         setInterval(reloadDBs, 5000);
+      </script>
+   </body>
+</html>

views/forms.hbs

@@ -32,19 +32,19 @@
             <div class="input-group">
                <label>{{label}}</label>
                {{#ifCond type  "===" "text"}}
-               <input type="text" placeholder="{{label}}" name="{{name}}" value="{{value}}" />
+               <input type="text" placeholder="{{label}}" name="{{name}}" value="{{value}}" {{disabled}} />
                {{/ifCond}}
 
                {{#ifCond type "===" "number"}}
-               <input type="number" placeholder="{{label}}" name="{{name}}" value="{{value}}" />
+               <input type="number" placeholder="{{label}}" name="{{name}}" value="{{value}}" {{disabled}} />
                {{/ifCond}}
 
                {{#ifCond type "===" "boolean"}}
-               <input type="checkbox" name="{{name}}" checked="{{value}}" />
+               <input type="checkbox" name="{{name}}" checked="{{value}}" {{disabled}} />
                {{/ifCond}}
 
                {{#ifCond type "===" "textarea"}}
-               <textarea class="inp" name="{{name}}" rows="20">{{value}}</textarea>
+               <textarea class="inp" name="{{name}}" rows="20" {{disabled}}>{{value}}</textarea>
                {{/ifCond}}
             </div>
             {{/each}}